Privacy Policy

Data controller: HRN Innovation Technologies Ltd. For any privacy request, contact us through the details published on the site. We respond to verified requests within 30 days.

Account data, email address, password hash (handled by our authentication provider), display name, handle, country, avatar, biography and, if you sign in with Google, the basic profile fields Google returns (name, email, profile picture).

Listing data, everything you submit or we enrich from a public URL you give us: names, headlines, descriptions, logos, cover images, tags, websites, social profiles, city and country, founded year, team size and pricing notes. Listing content is public by design.

Billing data, company or individual name, tax registration number and billing address used to issue invoices. Card details are never seen or stored by us; they are entered directly with our payment processor.

Transaction data, orders, Heat purchases, listing edit fees, invoice numbers, amounts in AED, payment status and processor references.

Referral data, your referral code, who joined through it, and the credit granted.

Technical data, IP address, device and browser information, pages viewed, outbound clicks on listing links, and error diagnostics.

To create and secure your account; to publish and moderate listings; to run the ranking engine; to take payment and issue invoices in AED; to calculate and grant referral credit; to prevent fraud, abuse and manipulation of the boards; to provide support; to measure and improve the service; and to comply with tax, accounting and legal obligations.

Legal bases where applicable: performance of a contract (account, listings, payments), legitimate interests (security, fraud prevention, product analytics), consent (non essential cookies, marketing email) and legal obligation (tax records).

Listings, board positions, Heat totals, booster counts and category placement are public. Do not put anything in a listing that you do not want the world, including search engines and AI crawlers, to see. Your billing address, tax ID, email and wallet balance are never public.

We share data only with processors who help us run the service: our cloud and database host, our authentication provider, our payment processor (for card processing, refunds and chargebacks), our email sender, and error and analytics tooling. We also disclose data where legally required, or to establish, exercise or defend legal claims. We never sell personal data.

Our providers may process data outside your country, including in the EU and the United States. Where required, transfers rely on standard contractual clauses or equivalent safeguards.

Account and listing data is kept while your account is open. Financial records, invoices and transaction logs are retained for the period required by applicable tax and company law (generally at least five years). Technical logs are kept for a short rolling window. After deletion we may keep an anonymised or minimal record to prevent re-abuse.

Subject to local law you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting prior processing. Most data can be edited directly in your dashboard. Deleting your account removes your profile and unpublishes your listings; paid placements already served and financial records are retained.

Access to data is protected by authentication, row level security rules and least privilege service credentials. Payment card data never touches our servers. No system is perfectly secure; report a suspected vulnerability to us rather than disclosing it publicly.

The service is not directed at anyone under 18. We do not knowingly collect data from children and will delete such accounts when identified.

We will update this page when our practices change and revise the date above. Material changes will be highlighted in the product.